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Fee(s) Transmittal and pay the PUBLICATION FEE (if required) 
and twice the amount of the ISSUE FEE shown above, or 
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Transmittal and pay the PUBLICATION FEE (if required) and 1/2 
the ISSUE FEE shown above. 
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(application filed on or after May 29, 2000) 
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mailing date of this notice and the patent issues on the Tuesday before the date that is 28 weeks (six and a half 
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Notice of Allowability 


Application No. 

09/808,720 


Applicant(s) 

GUDBJARTSSON ET AL. 


Examiner 

BEEMNET W. DADA 


Art Unit 

2135 





~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1 308. 

1 . K| This communication is responsive to 10/01/07 . 

2. The allowed claim(s) is/are 1, 2, 4, 7-21, 23, 25-41 . 

3. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) DAN b)DSome* c) □ None of the: 

1. D Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. O Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 



Attachment(s) 

1 . □ Notice of References Cited (PTO-892) 

2. □ Notice of Draftperson's Patent Drawing Review (PTO-948) 

3. □ Information Disclosure Statements (PTO/SB/08), 

Paper No./Mail Date 

4. □ Examiner's Comment Regarding Requirement for Deposit 

of Biological Material 



5. Q Notice of Informal Patent Application 

6. □ Interview Summary (PTO-413), 

Paper No./Mail Date . 

7. £3 Examiner's Amendment/Comment 

8. □ Examiner's Statement of Reasons for Allowance 

9. □ Other . 



Notice of Allowability 



Part of Paper No./Mail Date 20080505 
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DETAILED ACTION 
EXAMINER'S AMENDMENT 

An examiner's amendment to the record appears below. Should the changes and/or additions be 
unacceptable to applicant, an amendment may be filed as provided by 37 CFR 1.312. To ensure consideration 
of such an amendment, it MUST be submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with Keith J. Wood, 
Reg. No 45,235 on October 01, 2007. 

The application has been amended as follows: 
In the claims: 

1 . (Currently amended) In a computer network, apparatus for mapping data between different security 
domains, the apparatus comprising: 

a communication module stored on a computer-readable medium , the communication module fef 
establishing a communication connection between a sender of one security domain and a receiver in a 
different security domain, wherein the communication connection is a secure communication channel formed 
by the communication module (i) authenticating the sender with the communication module and authenticating 
the receiver with the communication module, resulting in an authorized sender and authorized receiver, and (ii) 
encrypting working data transmitted over the channel; 

a mapping module stored on a computer-readable medium coupled to the communication module , the 
mapping module fef anonymously mapping working data of the one security domain to working data of the 
different security domain, the working data having (i) a research data portion and (ii) a personal identifier 
portion related to identifying a person associated with the research data portion, the mapping module mapping 
the personal identifier portion of the working data in the one security domain to the personal identifier portion of 
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the working data in the different security domain such that the working data transmitted to the receiver over the 
secure communication channel is anonymous data, while leaving the research data portion unmapped by the 
anonymous mapping of the personal identifier portions; and 

a secret sharing module stored on a computer-readable medium , the secret sharing module for 
performing secret sharing to control keyholder access to the mapping module such that a predetermined 
number of keyholders greater than one is required to compromise access to the mapping module; 

the apparatus communicating between parties comprising at least the sender and the receiver in at 
least two different security domains; 

wherein the communication module i s capab le of (i) transmits transm i tt i ng both the anonymously 
mapped personal identifier portion and the unmapped research data portion of the working data to the receiver 
over the secure communication channel, and (ii) transmits transm i tt i ng from the receiver to the sender a return 
of the working data based on a reverse mapping performed by the mapping module; 

and wherein the anonymous mapping of the personal identifier portion is a one-to-one mapping. 

20. (Currently amended) A method for transferring and mapping data between different security domains in 
a computer network, comprising the steps of: 

using a communication module stored in a computer-readable medium, establishing a communication 
connection between a sender in one security domain and a receiver in a different security domain, wherein the 
communication connection is a secure communication channel formed by the communication module (i) 
authenticating the sender with the communication module and authenticating the receiver with the 
communication module, resulting in an authorized sender and authorized receiver, and (ii) encrypting working 
data transmitted over the channel; 
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using the communication module, transmitting working data from the authorized sender to the 
authorized receiver, the working data having (i) a research data portion and (ii) a personal identifier portion 
related to identifying a person associated with the research data portion; 

using a mapping module stored in a computer-readable medium, anonymously mapping the working 
data of the one security domain to working data of the different security domain by mapping between the 
personal identifier portion of the working data in the one security domain and the personal identifier portion of 
the working data in the different security domain, the mapping between the personal identifier portions being 
performed such that the working data received by the receiver over the secure communication channel is 
anonymous data, while leaving the research data portion unmapped by the anonymous mapping of the 
personal identifier portions; 

using a secret-sharing module stored in a computer-readable medium, 
controlling keyholder access to the mapping using secret sharing such that a predetermined number of 
keyholders greater than one is required to compromise access to the mapping module; and 

transmitting from the receiver to the sender a return of the working data based on a reverse mapping 
performed by the mapping module; 

wherein transmitting the working data from the sender to the receiver using the communication module 
comprises transmitting both the anonymously mapped personal identifier portion and the unmapped research 
data portion of the working data to the receiver over the secure communication channel; 

wh e r ei n th e commun i cat i on modu le i s capab le of transm i tt i ng from th e r e c ei v e r to th e s e nd e r a r e turn of 
th e work i ng data bas e d on a r e v e rs e mapp i ng p e rform e d by th e mapp i ng modu le ; and 

wherein the anonymous mapping of the personal identifier portion is a one-to-one mapping. 



Conclusion 
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Any inquiry concerning this communication or earlier communications from the examiner should be 
directed to BEEMNET W. DADA whose telephone number is (571 )272-3847. The examiner can normally be 
reached on Monday - Friday (9:00 am - 5:30 pm). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Kim Y. Vu 
can be reached on (571 ) 272-3859. The fax phone number for the organization where this application or 
proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) at 866- 
217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative or access to 
the automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Beemnet W Dada 

May 5, 2008 
/KIMYEN VU/ 

Supervisory Patent Examiner, Art Unit 2135 



